Privacy Policy

Ichè ("Iche", "we", "us") is an organisational intelligence platform operated by Opera Montis Limited at Nigerian Air Force (NAF) Harmony Estate, Port Harcourt, Rivers State, Nigeria. For personal data processed through customer workspaces, the customer organisation is the data controller and Iche acts as the data processor. For account and billing data we collect directly, Iche is the data controller.

You can reach us about this policy at support@iche.app.

Account data: name, email address, and authentication credentials when you create or are invited to an account.

Workspace data: the records your organisation chooses to store on the platform (assets, budgets, initiatives, people records, documents, and similar business information). This may include personal data about your staff or contacts, which your organisation controls.

Usage data: sign-in events and audit-trail entries recording actions taken in the platform, kept for security and accountability.

We do not sell personal data, and we do not use workspace data for advertising.

To provide the service (performance of a contract): operating your account, your organisation's workspace, and support requests.

For security and auditing (legitimate interest): access logging, abuse prevention, and incident investigation.

To meet legal obligations (legal obligation): retaining records where the law requires it.

Where we rely on consent (for example, optional communications), you can withdraw it at any time.

Data is encrypted in transit (TLS) and at rest. Each organisation's data is isolated, and access within a workspace is enforced at the database layer through role-based Row-Level Security.

Key actions are written to an audit trail, and records are archived rather than hard-deleted by default, so your organisation retains its history. Permanent deletion is available to administrators where retention rules require it.

More detail is available on our Security & Trust page.

We use a small number of infrastructure sub-processors to host and operate the platform (cloud hosting, database, and email delivery providers). They process data only on our instructions and under contractual confidentiality and security obligations.

We do not share personal data with third parties for their own marketing. We may disclose data where required by law or to protect the rights, safety, and security of the platform and its users.

A current list of sub-processors is available on request.

Our infrastructure may process data in data centres outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as contractual protections with our providers.

Workspace records are kept for as long as your organisation's account is active, or until your administrators delete or archive them. Audit logs are retained for security and accountability purposes.

When an organisation's account is closed, workspace data is deleted within 30 days, except where the law requires longer retention.

Depending on your location, you may have rights under the EU GDPR, Nigeria's NDPR, or other data-protection laws, including the right to access, correct, export, restrict, or delete your personal data, and the right to object to certain processing.

For workspace data, please contact your organisation's administrator first, as they control that data. You can also contact us at support@iche.app and we will help or direct your request appropriately.

You also have the right to complain to your supervisory authority, for example the Nigeria Data Protection Commission or your local EU data protection authority.

We use only the cookies and browser storage strictly necessary to operate the service, such as keeping you signed in. We do not use advertising or third-party tracking cookies.

We may update this policy from time to time. Material changes will be announced in the platform or by email, and the latest version will always be available on this page with its effective date.

Privacy questions and data-subject requests: support@iche.app.